CLAIMS 

1 (3^^^^ ^ computer-implemented method f#r obtaining data from at least one user 

2 ^ computer via the Internet while maintaining the^privacy of a user of the computer, comprising 

3 the acts of: / 

4 perturbing original data associated with the user computer to render perturbed data; 

5 and / 

6 using the perturbed crata, generating at least one data mining model. 

^| 2. The method of Claim 1, wherein perturbed data is generated from plural original 

..^ 

jS data associated with respective plural user computers. 

:= at 

41 3. The method of Claim 2, wherein the original data cannot be reconstructed from 

-2 the respective perturbed data. 

£?, ** 

J~i 4. The method of Claim 2, wherein at least some of the data is perturbed using a 

a 

2 uniform probability distribution. 

1 5. The method of Claim 2, wherein at least some of the data is perturbed using a 

2 Gaussian probability distribution. 
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1 6. The method of Claim 2, wherein at least some of the data is perturbed by 

2 selectively replacing the data with other values based on a probability. 

1 ^-V^^^^^^ ^ computer system including a prpgiam of instructions including structure to 

2 ( y< undertake method acts comprising: 

3 at a user computer, randomizing at least some original values of at least some 

4 numeric attributes to r^tfoer perturbed values; 

5 sending the perturbed values to a server computer; and 

6 at the server computer, processing the perturbed values to generate at least one 
J, classification model. 

53 

s\ 8. The computer of Claim 7, wherein perturbed values are generated from plural 

*M original values associated with respective plural user computers. 

fl 9. The computer of Claim 7, wherein the original values cannot be reconstructed from 

= 2| the respective perturbed values. 

1 10. The computer of Claim 7 3 wherein at least some of the original values are 

2 perturbed using a uniform probability distribution. 

1 11. The computer of Claim 7, wherein at least some of the original values are 

2 perturbed using a Gaussian probability distribution. 
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12. The computer of Claim 7, wherein the method acts further comprise perturbing 
categorical values of at least some categorical attributes by selectively replacing the categorical 
values with other values based on a probability. 



A computer storage device including computer readable code readable by a server 
computer for generating at least one classification model based on original data values stored at 
plural user computers without knowing the original values, comprising: 

logic means for receiving perturbed values from the user computers, the perturbed 
values representing randomized versions of the original values; and 

logic means for generating at least one classification model using at least in part 
the perturbed values and not using the original values. 



A computer storage device including/computer readable code readable by a user 
computer for facilitating the generation of at least/one classification model based on original data 
values stored at the user computer withoM kn6wing the original values, comprising: 

logic means for generatii^^pefturbed values representing randomized versions of 
the original values; and 

logic means for senctthg the perturbed values to a server computer for generating 
at least one classification/model based thereon. 
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1 15. The device of Claim 14, wherein ttte means for generating generates the perturbed 

2 values from original values. / 

1 16. The device of Claim 14, wherein the original values cannot be reconstructed from 

2 the respective perturbed values. L 



1 17. The device of Claim MywHerein at least some of the original values are perturbed 

2 using a uniform probability distribution to render the perturbed values. 

1 18. The device of Claim A 4, wherein at least some of the original values are perturbed 

fi I 

-| using a Gaussian probability distribution to render the perturbed values. 

y* I 

N / 

[A 19. The device of Claim 14, wherein at least some of the original values are perturbed 

s 2 by selectively replacing the values with other values based on a probability. 

~J 20. The method of Claim 1, further comprising sending the model to at least one user 

^2 computer for use thereof by the user computer on original data. 

1 ^^^JN^X^^^* ^ e met k°d of Cl^im 20, wherein the user computer used the model on original 

2 data to render a classification, and then sends the classification to the Web site. 
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22. The method of Claim 20, wherein the model is sent to the user computer as a 
JAVA applet. 



23. The system of Claim 7, wherein the method acts further comprise: 

sending the model to at least one user computer for use thereof by the user 



computer on original data. 
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